Imce Module (Drupal) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2007-03-05. Vendor: Drupal.

CVEs of Imce Module

• CVE-2006-7110 - CVSS 5.5 (medium), 2007-03-05: Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticated users to delete arbitrary files via…
• CVE-2006-7109 - CVSS 6.5 (medium), 2007-03-05: Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload arbitrary PHP code via a filename with…